CISA says 'patch now' to 7-year-old Oracle WebLogic bug
Jun 6, 2024 · CVE-2017-3506 affects Oracle's WebLogic Server, allowing for remote command execution on affected operating systems. Carrying a 7.4 severity, patches were originally released for it in April 2017, but recent research suggests it's now being exploited by financially motivated Chinese cybercriminals.
Oracle WebLogic Server OS Command Injection Flaw ... - The Hacker News
Jun 4, 2024 · The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.
CISA Warns of Attacks Exploiting Oracle WebLogic ... - SecurityWeek
May 2, 2023 · The US Cybersecurity and Infrastructure Security Agency (CISA) has added three vulnerabilities to its known exploited vulnerabilities catalog, including an Oracle WebLogic flaw patched by the vendor in January.
Moving Forward with Oracle WebLogic Server and Oracle Fusion …
Jul 8, 2022 · We have good news to highlight for Oracle WebLogic Server and Oracle Fusion Middleware customers. This information is available from standard Oracle documents that are maintained on an ongoing basis, but we are providing an overview here to help customers plan upgrades and new deployments.
Update on the WebLogic Server October 2021 Patch Set Update …
Nov 1, 2021 · As part of this general update, we have released WebLogic Server Patch Set Updates (PSUs) and Coherence CPUs for versions of these products that are currently supported and under error correction. These include the following WebLogic Server versions: WebLogic Server 10.3.6; WebLogic Server 12.1.3; WebLogic Server 12.2.1.3; WebLogic Server 12.2.1.4
The WebLogic Server Blog - Oracle Blogs
Oracle WebLogic Server Support news, tips, live webcasts, patch and release information.
New ‘Hadooken’ Linux Malware Targets WebLogic Servers
Sep 13, 2024 · A new Linux malware has been observed targeting Oracle WebLogic servers to deploy additional malware and extract credentials for lateral movement, Aqua Security’s Nautilus research team warns. Called Hadooken, the malware is deployed in attacks that exploit weak passwords for initial access.
Weblogic Server - Oracle
Run WebLogic applications in the cloud. With rapid provisioning and choice of infrastructure and pricing, Oracle WebLogic Server for Oracle Cloud Infrastructure provides full support to run Java EE applications in the cloud. Learn about the features.
New Linux Malware Campaign Exploits Oracle Weblogic ... - The Hacker News
Sep 13, 2024 · Cybersecurity researchers have uncovered a new malware campaign targeting Linux environments to conduct illicit cryptocurrency mining and deliver botnet malware.
WebLogic | News & Insights | The Hacker News
Read the latest updates about WebLogic on The Hacker News cybersecurity and information technology publication.